Developing6 outlets · over 5 days
macOS Screen Sharing flaw exploited for Monero mining
Apple patched CVE-2026-65400, a Screen Sharing authentication flaw in macOS Tahoe, Sequoia, and Sonoma, after the Netherlands National Cyber Security Centre observed active exploitation. Attackers gained root access on systems with port 5900 exposed and installed a Monero crypto miner.
The story so far3 updates, latest first.
Tracked by ByteBrief